The Energy Performance of Buildings (Certificates and Inspections) (England and Wales) Regulations 2007

Regulation 35(2)(e)

[F1 SCHEDULE 2 E+W

Textual Amendments

F1 Schs. 2, 3 inserted (6.4.2012) by The Energy Performance of Buildings (Certificates and Inspections) (England and Wales) (Amendment) Regulations 2012 (S.I. 2012/809), regs. 1(3), 10, Sch.

PART 1 E+W

The purposes are E+W

1.   Promoting energy efficiency improvements (as defined in section 2 of the Energy Act 2011) (“energy efficiency improvements”) in relation to buildings.

2.   Conducting research into, or developing or analysing policy (or policy proposals) in relation to, the energy efficiency of buildings.

3.   Conducting research into the effectiveness or impact of energy efficiency improvements.

4.   Identifying geographic areas where the energy efficiency of buildings is low relative to other areas, or conducting research into the extent, causes or consequences of such lower levels of efficiency.

5.   Promoting and marketing energy efficiency improvements that may be made pursuant to a green deal plan.

6.   Identifying and analysing the impact of carbon emissions on the environment resulting from buildings with low levels of energy efficiency.

7.   Determining whether energy efficiency improvements that may be made pursuant to a green deal plan have or have not been made in respect of a particular building or buildings.

Regulation 35(2)(f)

PART 2 E+W

The conditions are E+W

1.   The authorised recipient is, until the data is deleted from the authorised recipient’s records and systems (so that the personal data is no longer accessible by any means by the authorised recipient) a data controller within the meaning of section 1(1) of the Data Protection Act 1998 in relation to the information disclosed.

2.   The authorised recipient must not—

(a) disclose any personal data contained in or derived from data disclosed to them under regulation 35 to any other person without the consent of the person who is the subject of the data;

(b) use such personal data in order to contact an individual for the purpose of marketing or promoting products or services which do not relate to energy efficiency.

3.   The authorised recipient must not make contact with any person (“the subject”) whose identity or contact details (or both) have become known to the authorised recipient from data disclosed to the authorised recipient under regulation 35 unless—

(a) the authorised recipient advises the subject, at the time contact is first made that—

(i) their identity or contact details (or both) have been obtained from the keeper of the register under that regulation, and

(i) the subject is entitled to refuse to receive any further communications from the authorised recipient; and

(b) the first contact with the subject is made by means of written communication (including electronic communication) only.

4.   The authorised recipient must not make further contact with a person if the person has informed the authorised recipient that they do not wish to receive any further communications from the authorised recipient.

5.   If the authorised recipient has on three separate occasions made contact with a person (“the subject”) whose identity or contact details (or both) have become known to the authorised recipient from data disclosed to them under regulation 35 and received no response from the subject within fourteen days of the date of the third contact, the authorised recipient—

(a) must not attempt to contact the person again; and

(b) must, as soon as reasonably practicable (and in any event within fourteen days of the receipt of a request made by or on behalf of the subject to do so) delete any personal data contained in or derived from data disclosed to the authorised recipient under regulation 35 from its records and systems (so that the personal data is no longer accessible by any means by the authorised recipient).

6.   The authorised recipient must, as soon as reasonably practicable (and in any event within fourteen days of the receipt of a request made by or on behalf of the subject to do so) delete any personal data contained in or derived from data disclosed to the authorised recipient under regulation 35 from its records and systems (so that the personal data is no longer accessible by any means by the authorised recipient) if the person who is the subject of the data requests the authorised recipient to do so.

7.   The authorised recipient must ensure that its officers and employees comply with the conditions in paragraphs 1 to 7 above.]